CWE-287: Improper Authentication, page 36

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

What the weakness is: CWE-287 at MITRE

1. 9.3CVE-2024-41798EPSS 0.5%2024-10-08

   A vulnerability has been identified in SENTRON 7KM PAC3200 (All versions). Affected devices only provide a 4-digit PIN to protect from administrative access via Modbus TCP interface. Attackers with access to the Modbus TCP interface could …

2. 8.2CVE-2024-45051EPSS 0.4%2024-10-07

   Discourse is an open source platform for community discussion. A maliciously crafted email address could allow an attacker to bypass domain-based restrictions and gain access to private sites, categories and/or groups. This issue has been …

3. 6.9CVE-2024-47768EPSS 0.5%2024-10-04

   Lif Authentication Server is a server used by Lif to do various tasks regarding Lif accounts. This vulnerability has to do with the account recovery system where there does not appear to be a check to make sure the user has been sent the r…

4. 8.8CVE-2024-41589EPSS 0.3%2024-10-03

   DrayTek Vigor310 devices through 4.3.2.6 use unencrypted HTTP for authentication requests.

5. 8.1CVE-2024-47807EPSS 0.6%2024-10-02

   Jenkins OpenId Connect Authentication Plugin 4.354.v321ce67a_1de8 and earlier does not check the `iss` (Issuer) claim of an ID Token, allowing attackers to subvert the authentication flow, potentially gaining administrator access to Jenkin…

6. 8.1CVE-2024-47806EPSS 0.6%2024-10-02

   Jenkins OpenId Connect Authentication Plugin 4.354.v321ce67a_1de8 and earlier does not check the `aud` (Audience) claim of an ID Token, allowing attackers to subvert the authentication flow, potentially gaining administrator access to Jenk…

7. 9.0CVE-2024-47070EPSS 0.6%2024-09-27

   authentik is an open-source identity provider. A vulnerability that exists in versions prior to 2024.8.3 and 2024.6.5 allows bypassing password login by adding X-Forwarded-For header with an unparsable IP address, e.g. `a`. This results in…

8. 5.9CVE-2024-47174EPSS 0.3%2024-09-26

   Nix is a package manager for Linux and other Unix systems. Starting in version 1.11 and prior to versions 2.18.8 and 2.24.8, `<nix/fetchurl.nix>` did not verify TLS certificates on HTTPS connections. This could lead to connection details s…

9. 6.0CVE-2024-47127EPSS 0.1%2024-09-26

   In the goTenna Pro App there is a vulnerability that makes it possible to inject any custom message with any GID and Callsign using a software defined radio in existing goTenna mesh networks. This vulnerability can be exploited if the d…

10. 7.6CVE-2024-47125EPSS 0.1%2024-09-26

    The goTenna Pro App does not authenticate public keys which allows an unauthenticated attacker to manipulate messages. It is advised to update your app to the current release for enhanced encryption protocols.

11. 4.4CVE-2024-45042EPSS 0.3%2024-09-26

    Ory Kratos is an identity, user management and authentication system for cloud services. Prior to version 1.3.0, given a number of preconditions, the `highest_available` setting will incorrectly assume that the identity’s highest available…

12. 7.3CVE-2024-45750EPSS 0.5%2024-09-25

    An issue in TheGreenBow Windows Standard VPN Client 6.87.108 (and older), Windows Enterprise VPN Client 6.87.109 (and older), Windows Enterprise VPN Client 7.5.007 (and older), Android VPN Client 6.4.5 (and older) VPN Client Linux 3.4 (and…

13. 9.8CVE-2024-47078EPSS 0.5%2024-09-25

    Meshtastic is an open source, off-grid, decentralized, mesh network. Meshtastic uses MQTT to communicate over an internet connection to a shared or private MQTT Server. Nodes can communicate directly via an internet connection or proxied t…

14. 9.8CVE-2024-0002EPSS 0.6%2024-09-23

    A condition exists in FlashArray Purity whereby an attacker can employ a privileged account allowing remote access to the array.

15. 9.8CVE-2024-47218EPSS 0.6%2024-09-22

    An issue was discovered in vesoft NebulaGraph through 3.8.0. It allows bypassing authentication.

16. 6.5CVE-2022-25768EPSS 0.3%2024-09-18

    The logic in place to facilitate the update process via the user interface lacks access control to verify if permission exists to perform the tasks. Prior to this patch being applied it might be possible for an attacker to access the Mauti…

17. 9.8CVE-2024-34399EPSS 0.5%Unsupported when assigned2024-09-18

    An issue was discovered in BMC Remedy Mid Tier 7.6.04. An unauthenticated remote attacker is able to access any user account without using any password. NOTE: This vulnerability only affects products that are no longer supported by the mai…

18. 8.8CVE-2024-41929EPSS 0.5%2024-09-18

    Improper authentication vulnerability in multiple digital video recorders provided by TAKENAKA ENGINEERING CO., LTD. allows a remote authenticated attacker to execute an arbitrary OS command on the device or alter the device settings.

19. 9.1CVE-2024-8956KEVEPSS 59%2024-09-17

    PTZOptics PT30X-SDI/NDI-xx before firmware 6.3.40 is vulnerable to an insufficient authentication issue. The camera does not properly enforce authentication to /cgi-bin/param.cgi when requests are sent without an HTTP Authorization header.…

20. 5.3CVE-2024-44202EPSS 0.5%2024-09-17

    An authentication issue was addressed with improved state management. This issue is fixed in Safari 18, iOS 18 and iPadOS 18. Private Browsing tabs may be accessed without authentication.

21. 5.3CVE-2024-44127EPSS 0.6%2024-09-17

    This issue was addressed through improved state management. This issue is fixed in iOS 17.7 and iPadOS 17.7, iOS 18 and iPadOS 18. Private Browsing tabs may be accessed without authentication.

22. 7.5CVE-2024-45113EPSS 0.6%2024-09-13

    ColdFusion versions 2023.6, 2021.12 and earlier are affected by an Improper Authentication vulnerability that could result in privilege escalation. An attacker could exploit this vulnerability to gain unauthorized access and affect the int…

23. 9.2CVE-2024-45823EPSS 0.5%2024-09-12

    CVE-2024-45823 IMPACT An authentication bypass vulnerability exists in the affected product. The vulnerability exists due to shared secrets across accounts and could allow a threat actor to impersonate a user if the threat actor is able…

24. 5.1CVE-2024-8642EPSS 0.4%2024-09-11

    In Eclipse Dataspace Components, from version 0.5.0 and before version 0.9.0, the ConsumerPullTransferTokenValidationApiController does not check for token validity (expiry, not-before, issuance date), which can allow an attacker to bypass…

25. 9.8CVE-2024-38225EPSS 1.4%2024-09-10

    Microsoft Dynamics 365 Business Central Elevation of Privilege Vulnerability

26. 9.8CVE-2023-37226EPSS 0.6%2024-09-10

    Loftware Spectrum before 4.6 HF14 has Missing Authentication for a Critical Function.

27. 7.8CVE-2024-40713EPSS 0.3%2024-09-07

    A vulnerability that allows a user who has been assigned a low-privileged role within Veeam Backup & Replication to alter Multi-Factor Authentication (MFA) settings and bypass MFA.

28. 8.8CVE-2023-45038ExploitEPSS 1.2%2024-09-06

    An improper authentication vulnerability has been reported to affect Music Station. If exploited, the vulnerability could allow users to compromise the security of the system via a network. We have already fixed the vulnerability in the f…

29. 7.5CVE-2024-5957EPSS 0.4%2024-09-05

    This vulnerability allows unauthenticated remote attackers to bypass authentication and gain APIs access of the Manager.

30. 5.3CVE-2024-5956EPSS 0.4%2024-09-05

    This vulnerability allows unauthenticated remote attackers to bypass authentication and gain partial data access to the vulnerable Trellix IPS Manager with garbage data in response mostly

31. 5.3CVE-2024-44821EPSS 0.4%2024-09-04

    ZZCMS 2023 contains a vulnerability in the captcha reuse logic located in /inc/function.php. The checkyzm function does not properly refresh the captcha value after a failed validation attempt. As a result, an attacker can exploit this fla…

32. 9.8CVE-2024-7923EPSS 0.8%2024-09-04

    An authentication bypass vulnerability has been identified in Pulpcore when deployed with Gunicorn versions prior to 22.0, due to the puppet-pulpcore configuration. This issue arises from Apache's mod_proxy not properly unsetting headers b…

33. 9.8CVE-2024-7012EPSS 0.8%2024-09-04

    An authentication bypass vulnerability has been identified in Foreman when deployed with External Authentication, due to the puppet-foreman configuration. This issue arises from Apache's mod_proxy not properly unsetting headers because of …

34. 7.5CVE-2024-7870EPSS 0.4%2024-09-04

    The PixelYourSite – Your smart PIXEL (TAG) & API Manager and the PixelYourSite PRO plugins for WordPress are vulnerable to Sensitive Information Exposure in all versions up to, and including, 9.7.1 and 10.4.2, respectively, through publicl…

35. 4.8CVE-2024-7346EPSS 0.2%2024-09-03

    Host name validation for TLS certificates is bypassed when the installed OpenEdge default certificates are used to perform the TLS handshake for a networked connection.  This has been corrected so that default certificates are no longer ca…

36. 8.1CVE-2024-7745EPSS 0.4%2024-08-28

    In WS_FTP Server versions before 8.8.8 (2022.0.8), a Missing Critical Step in Multi-Factor Authentication of the Web Transfer Module allows users to skip the second-factor verification and log in with username and password only.

37. 8.8CVE-2024-45346EPSS 0.5%2024-08-28

    The Xiaomi Security Center expresses heartfelt thanks to Ken Gannon and Ilyes Beghdadi of NCC Group working with Trend Micro Zero Day Initiative! At the same time, we also welcome more outstanding and professional security experts and secu…

38. 8.1CVE-2024-8181ExploitEPSS 45%2024-08-27

    An Authentication Bypass vulnerability exists in Flowise version 1.8.2. This could allow a remote, unauthenticated attacker to access API endpoints as an administrator and allow them to access restricted functionality.

39. 4.3CVE-2024-45036EPSS 0.3%2024-08-26

    Tophat is a mobile applications testing harness. An Improper Access Control vulnerability can expose the `TOPHAT_APP_TOKEN` token stored in `~/.tophatrc` through use of a malicious Tophat URL controlled by the attacker. The vulnerability a…

40. 8.5CVE-2024-7401EPSS 0.8%2024-08-26

    Netskope was notified about a security gap in Netskope Client enrollment process where NSClient is using a static token “Orgkey” as authentication parameter. Since this is a static token, if leaked, cannot be rotated or revoked. A maliciou…

41. 8.1CVE-2024-36444EPSS 0.5%2024-08-22

    cgi-bin/fdmcgiwebv2.cgi on Swissphone DiCal-RED 4009 devices allows an unauthenticated attacker to gain access to device logs.

42. 6.5CVE-2024-43409EPSS 0.3%2024-08-20

    Ghost is a Node.js content management system. Improper authentication on some endpoints used for member actions would allow an attacker to perform member-only actions, and read member information. This security vulnerability is present in …

43. 9.8CVE-2024-42336EPSS 0.4%2024-08-20

    Servision - CWE-287: Improper Authentication

44. 7.5CVE-2024-38810EPSS 0.5%2024-08-20

    Missing Authorization When Using @AuthorizeReturnObject in Spring Security 6.3.0 and 6.3.1 allows attacker to render security annotations inaffective.

45. 9.8CVE-2024-43240EPSS 0.5%2024-08-19

    Improper Authentication vulnerability in azzaroco Ultimate Membership Pro indeed-membership-pro.This issue affects Ultimate Membership Pro: from n/a through <= 12.7.

46. 10.0CVE-2024-42462EPSS 0.5%2024-08-16

    Improper Authentication vulnerability in upKeeper Solutions product upKeeper Manager allows Authentication Bypass.This issue affects upKeeper Manager: through 5.1.9.

47. 6.8CVE-2024-31800EPSS 0.4%2024-08-15

    Authentication Bypass in GNCC's GC2 Indoor Security Camera 1080P allows an attacker with physical access to gain a privileged command shell via the UART Debugging Port.

48. 8.6CVE-2024-6078EPSS 0.4%2024-08-14

    CVE-2024-6078 IMPACT An improper authentication vulnerability exists in the affected product, which could allow a malicious user to generate cookies for any user ID without the use of a username or password. If exploited, a malicious user…

49. 6.3CVE-2024-37028EPSS 0.4%2024-08-14

    BIG-IP Next Central Manager may allow an attacker to lock out an account that has never been logged in.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

50. 6.5CVE-2024-25157EPSS 0.5%2024-08-14

    An authentication bypass vulnerability in GoAnywhere MFT prior to 7.6.0 allows Admin Users with access to the Agent Console to circumvent some permission checks when attempting to visit other pages. This could lead to unauthorized informat…